Application Security Engineer

Reproduce and triage incoming vulnerabilities from security automation/bug bounty programs, then propose granular fixes to engineers

Discover vulnerabilities and construct exploits for core Parallels applications such as Parallels Remote Application Server

Assist in the CVE disclosure process

Provide threat models and design reviews for teams throughout the company

Assist in tuning existing static analysis, dynamic analysis, and dependency management tools

Desired Qualities:

An attacker mindset: engineers will often want proof before fixes are implemented

Eagerness to learn – you are not expected to know everything coming in, but you should continuously learn new techniques on the job

The ability to communicate clearly, acknowledge mistakes, and disagree when necessary

Demonstrable passion for offensive security

Experience reading, writing and debugging C++ and Python code

Basic experience with memory exploitation techniques

Demonstrable experience with web exploitation techniques and tools (e.g. PortSwigger lab scoreboards)

Excellent written and oral communication skills

Ideal Candidate Will Have:

BSc/MS in computer science or a related field

Previous CVEs in desktop applications

Proficiency with reverse engineering tools

Significant experience in memory exploitation techniques (e.g. gaining code execution from memory vulnerabilities in modern operating systems)

Familiarity with cloud security best practices

3+ years of industry experience

OSCP/OSWE/OSED/RET2 certification

What are you waiting for? Apply now. We can't wait to meet you.

(FYI, we're lucky to get a lot of interest and we appreciate every application — please note we'll only reach out if you've been selected for an interview.)

Parallels is a top VDI/EUC product helping businesses since 1999. Whether it's desktop or cloud, on-prem or hybrid, Parallels delivers speed, security, and affordability for the modern work environment.

It is our policy and practice to offer equal employment opportunities to all qualified applicants and employees without regard to race, color, age, religion, national origin, sex, political affiliation, sexual orientation, marital status, disability, veteran status, genetics, or any other protected characteristic.

Parallels is committed to an inclusive, barrier-free recruitment and selection process and work environment. If you are contacted for a job opportunity, please advise us of any accommodations required. Appropriate accommodation will be provided upon request as required by law.

#LI-Remote